CVE-2021-3807

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-3807
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3807.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-3807
Aliases
Downstream
ALSA (3)
CGA (4)
CLSA (1)
DEBIAN (1)
MINI (1)
openSUSE (4)
RHSA (8)
RLSA (4)
ROOT (1)
SUSE (16)
UBUNTU (1)
Related
ALSA (3)
openSUSE (4)
SUSE (16)
Published
2021-09-17T07:15:09Z
Modified
2026-10-20T10:53:52Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

ansi-regex is vulnerable to Inefficient Regular Expression Complexity

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "1.15.0"
                        },
                        {
                            "last_affected":  "1.15.0"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "oracle:communications_cloud_native_core_policy"
        }
    ]
}
References

Affected packages

Git / github.com/chalk/ansi-regex

Affected ranges

Type
GIT
Repo
https://github.com/chalk/ansi-regex
Events
Introduced
a1d92466388fc8766b63bfab27ddc1e1df897dda
Fixed
64735d25eb839b55bc9fae3877edb702b4c92ca2
Introduced
0a8cc19946c03c38520fe8c086b8adb66f9cce0b
Last Affected
c1b5e45f7c65a332ffb03ac8e5804ad37c579cdc
Fixed
8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:ansi-regex_project:ansi-regex:*:*:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "4.0.0"
                },
                {
                    "fixed":  "4.1.1"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:ansi-regex_project:ansi-regex:3.0.0:*:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "3.0.0"
                },
                {
                    "last_affected":  "3.0.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.0:*:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "5.0.0"
                },
                {
                    "last_affected":  "5.0.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:ansi-regex_project:ansi-regex:6.0.0:*:*:*:*:node.js:*:*",
            "range":  [
                {
                    "introduced":  "6.0.0"
                },
                {
                    "last_affected":  "6.0.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "range":  [
                {
                    "fixed":  "8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

3.*
3.0.0
5.*
5.0.0
6.*
6.0.0
v4.*
v4.0.0
v4.1.0
v5.*
v5.0.0
v6.*
v6.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3807.json"